Legal

Privacy Policy

Last updated: March 2026

1. Who We Are

Scrubly (“we”, “us”, “our”) operates the Scrubly platform at scrubly.co.uk. We are the data controller for personal information collected through our website and services. Contact: privacy@scrubly.co.uk

2. What Data We Collect

We collect the following categories of personal data:

  • Account data: name, email address, password (hashed), phone number
  • Booking data: address, service preferences, booking history, payment records
  • Cleaner data: work history, DBS check results, bank details (for payment), areas of operation
  • Usage data: pages visited, device type, IP address, session duration (via cookies)

3. How We Use Your Data

We use your personal data to:

  • Create and manage your account
  • Process and fulfil bookings
  • Process payments and send invoices
  • Match customers with suitable cleaners
  • Send booking confirmations and service reminders
  • Respond to enquiries and support requests
  • Improve our platform and services
  • Comply with legal obligations

4. Legal Basis for Processing

We process your data on the following legal bases under UK GDPR:

  • Contract performance: to deliver the services you have booked
  • Legitimate interests: to improve our platform and prevent fraud
  • Legal obligation: to comply with tax, employment, and data protection law
  • Consent: for marketing communications (you may withdraw at any time)

5. Data Sharing

We share personal data with:

  • Cleaners — limited booking information (customer first name, address, service details)
  • Payment processors — Stripe (for secure payment processing)
  • Background check providers — to verify cleaner identity and DBS status
  • Analytics providers — in anonymised/aggregated form only

We do not sell your personal data to third parties.

6. Data Retention

We retain account data for as long as your account is active and for up to 7 years after account closure for legal and tax purposes. Booking data is retained for 7 years. You may request earlier deletion subject to our legal obligations.

7. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data (“right to be forgotten”)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time

To exercise any of these rights, contact privacy@scrubly.co.uk. We will respond within 30 days.

8. Cookies

We use essential cookies for session management and optional analytics cookies to understand how our platform is used. You can manage cookie preferences in your browser settings.

9. Security

We use industry-standard encryption (TLS) for data in transit and encrypt sensitive data at rest. Access to personal data is restricted to staff who need it to perform their duties.

10. Contact & Complaints

If you have concerns about how we handle your data, contact privacy@scrubly.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).